Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: AVPEing1wM7C3jTQhE1HYTsUEUT95YYL6m1C1qExO5I=
Subject key identifier: 3E:4A:C9:2F:8C:F7:67:C9:35:DC:BC:37:ED:5F:39:2F:4E:A2:CB:DD
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019D99D06A02ABEEACC16C6111F745B1B1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 18D3
Signing time: Fri 17 Apr 2026 05:01:05 +0000
Manifest this update: Fri 17 Apr 2026 05:01:05 +0000
Manifest next update: Sat 18 Apr 2026 05:01:05 +0000
Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
2: FCbP3k2rGutoC5ZIVI42Yy4D044.roa (hash: YEtesgH5hZKksi2t3ICvpYYP+6hkAxgaGRoHD54GMj4=)
3: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
4: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: lkddP2llF9aOjz5qHP0+mQ/iQcSHXZ5d1KopH4OwQd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:6a:02:ab:ee:ac:c1:6c:61:11:f7:45:b1:b1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Apr 17 05:01:05 2026 GMT
Not After : Apr 18 05:01:05 2026 GMT
Subject: CN=3e4ac92f8cf767c935dcbc37ed5f392f4ea2cbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9f:de:95:8c:49:5d:fe:aa:7e:45:8d:48:a4:
6a:a4:06:2c:c0:42:e5:d0:2d:3e:6e:fe:cb:09:49:
e8:e6:e2:5a:ef:d8:49:e6:e5:37:01:2f:a6:0b:49:
23:b8:45:2e:0e:04:9f:93:1d:7e:c9:1f:ac:ce:f1:
db:7d:ff:b2:da:ee:2d:c0:59:8d:88:dc:92:57:45:
93:8c:b1:c4:56:da:9a:16:ff:35:95:3f:37:27:18:
a3:e8:bd:7a:c3:9f:43:24:a9:6f:15:4a:a0:cc:d1:
8a:66:74:cb:a4:7b:29:1e:75:ca:71:6b:bd:8a:8d:
a1:36:34:fe:60:2b:e0:f5:3c:a3:d5:88:05:f0:ba:
a1:fa:94:d5:24:b6:56:5f:9b:6e:1b:b7:d9:5b:b8:
68:84:ba:4f:c2:ae:06:c8:2a:1c:27:00:7a:38:1a:
eb:d4:10:d4:d4:6f:c3:e8:98:45:f5:1c:d5:28:8c:
dc:33:7b:91:bd:87:34:ec:07:1d:4c:53:a3:37:d4:
7c:74:a5:14:ef:31:80:c6:b9:c4:26:25:23:22:c8:
45:74:d0:7a:73:3d:a0:8f:00:da:f6:45:ad:aa:8b:
09:35:9a:48:7e:61:00:c9:12:90:e8:33:99:99:ff:
65:f9:9b:77:fc:2c:e7:75:c8:0c:b5:43:71:ba:c4:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4A:C9:2F:8C:F7:67:C9:35:DC:BC:37:ED:5F:39:2F:4E:A2:CB:DD
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d6:af:95:ec:aa:eb:19:ca:e1:48:e0:c1:ae:da:71:af:77:
aa:6b:0e:df:91:a3:dc:76:7f:d3:06:45:b9:79:4b:43:09:73:
d1:3b:5c:f1:88:8f:24:83:8e:7f:f2:23:af:f6:95:e4:1b:7a:
36:d4:25:38:a3:7d:73:27:74:d2:a5:22:86:b0:68:80:49:42:
59:98:bd:1b:bd:3a:ad:57:bb:05:04:84:92:85:de:fe:5e:95:
47:b9:55:c1:b7:26:a6:f7:86:1b:b7:3e:f1:fd:0e:1c:f2:8c:
b0:26:6e:e0:c2:2c:df:15:bb:a0:b8:32:7f:ac:f0:c2:6a:20:
23:cf:c3:f7:82:76:7a:20:ea:a2:8b:cd:39:77:89:05:37:45:
7f:1e:0c:13:c8:d1:1f:61:cb:6e:ae:c7:f3:30:7d:81:71:c8:
e8:68:a0:28:54:fb:9a:af:5f:03:69:14:db:56:82:86:00:0c:
50:29:f3:b4:df:32:37:2e:83:8b:0f:1a:b9:2a:84:c3:4e:49:
c2:6d:8e:e0:55:f3:6d:30:c7:88:ff:6a:f3:b9:ff:c4:20:e2:
63:d2:72:b3:32:bb:2e:2f:41:c9:aa:3a:b7:74:76:7e:7d:83:
12:b2:3f:58:1b:87:b5:c9:62:34:06:cd:f6:bf:f3:0c:12:cc:
62:64:6b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:46 2026 by rpki-client